BELLEVUE, Aug. 10 -- The email from Valve arrived in Steam hardware customers' inboxes on Sunday, carrying a disclosure most had no reason to anticipate: their names, addresses, phone numbers, and email addresses had been stolen. Not from Steam's own systems. From the logistics company that shipped their orders.

CEVA Logistics, a wholly owned subsidiary of CMA CGM Group, the world's third-largest container shipping company by capacity, suffered a cyberattack between July 29 and August 1, 2026. The attackers accessed servers containing delivery records for Steam Machine and Steam Controller purchases shipped to customers across Europe. Valve says it was notified of the breach on August 7, and began sending disclosure emails to affected cu...